IP address
Shodan(more info)

Passive DNS

- Warden events (16)
- 2026-07-03
-
- ReconScanning (node.86eb21): 1
- 2026-07-01
-
- ReconScanning (node.86eb21): 1
- 2026-06-27
-
- ReconScanning (node.86eb21): 1
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 2
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- DShield reports (IP summary, reports)
- 2026-04-20
- Number of reports: 24
- Distinct targets: 4
- 2026-04-21
- Number of reports: 24
- Distinct targets: 4
- 2026-04-29
- Number of reports: 34
- Distinct targets: 5
- 2026-04-30
- Number of reports: 34
- Distinct targets: 5
- 2026-05-07
- Number of reports: 22
- Distinct targets: 5
- 2026-05-08
- Number of reports: 22
- Distinct targets: 5
- 2026-05-14
- Number of reports: 28
- Distinct targets: 4
- 2026-05-20
- Number of reports: 38
- Distinct targets: 6
- 2026-06-02
- Number of reports: 16
- Distinct targets: 3
- 2026-06-03
- Number of reports: 16
- Distinct targets: 3
- 2026-06-09
- Number of reports: 20
- Distinct targets: 4
- 2026-06-10
- Number of reports: 20
- Distinct targets: 4
- 2026-06-16
- Number of reports: 20
- Distinct targets: 3
- 2026-07-09
- Number of reports: 24
- Distinct targets: 3
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 39 | src | scan |
- Origin AS
- AS202422 - GHOST
- BGP Prefix
- 45.82.102.0/24
- geo
- Romania, Bucharest
- 🕑 Europe/Bucharest
- hostname
- bucharest.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 45.82.100.0 - 45.82.103.255
- last_activity
- 2026-07-03 02:22:33
- last_warden_event
- 2026-07-03 02:22:33
- rep
- 0.001877740183952814
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 15, 19, 22, 43, 51, 80, 81, 82, 84, 88, 89, 104, 106, 110, 119, 175, 179, 221, 234, 263, 264, 311, 389, 402, 443, 444, 445, 449, 502, 513, 515, 548, 554, 587, 593, 785, 943, 992, 1080, 1153, 1177, 1190, 1200, 1234, 1311, 1337, 1388, 1400, 1414, 1433, 1455, 1471, 1515, 1521, 1554, 1588, 1599, 1604, 1650, 1660, 1883, 1911, 1925, 1935, 1965, 1973, 2008, 2010, 2030, 2081, 2083, 2087, 2090, 2095, 2096, 2200, 2220, 2222, 2345, 2404, 2455, 2525, 2556, 2557, 2628, 2761, 2762, 3001, 3007, 3016, 3018, 3072, 3093, 3110, 3115, 3117, 3138, 3145, 3173, 3182, 3260, 3268, 3310, 3345, 3349, 3400, 3401, 3460, 3541, 3550, 3556, 3562, 3690, 3780, 4000, 4022, 4155, 4242, 4282, 4369, 4402, 4433, 4443, 4444, 4488, 4550, 4567, 4782, 4786, 4848, 4911, 4949, 5000, 5001, 5007, 5010, 5190, 5222, 5236, 5243, 5246, 5251, 5268, 5357, 5440, 5461, 5494, 5560, 5594, 5604, 5660, 5900, 5902, 5911, 5938, 5984, 5986, 6001, 6004, 6006, 6080, 6379, 6432, 6514, 6561, 6653, 6666, 6668, 6712, 6748, 7001, 7021, 7079, 7272, 7434, 7465, 7480, 7657, 7979, 7980, 8000, 8001, 8010, 8011, 8026, 8037, 8042, 8047, 8060, 8066, 8069, 8085, 8086, 8090, 8094, 8099, 8103, 8111, 8115, 8122, 8138, 8139, 8155, 8181, 8200, 8236, 8385, 8388, 8410, 8412, 8413, 8430, 8449, 8470, 8484, 8530, 8544, 8545, 8565, 8575, 8577, 8623, 8630, 8637, 8787, 8790, 8800, 8804, 8813, 8818, 8820, 8834, 8842, 8853, 8854, 8873, 8875, 8880, 8889, 8912, 8989, 9000, 9026, 9051, 9065, 9079, 9080, 9090, 9092, 9100, 9102, 9108, 9112, 9142, 9143, 9146, 9151, 9175, 9179, 9201, 9207, 9222, 9246, 9305, 9306, 9433, 9443, 9465, 9530, 9595, 9674, 9710, 9761, 9800, 9898, 9943, 9944, 9966
- Tags: honeypot
- CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1
- ts_added
- 2026-02-06 01:24:50.051000
- ts_last_update
- 2026-07-11 01:25:00.425000
Warden event timeline
DShield event timeline

